Re: Do you want to buy this domain name spam

On 1/16/2014 1:51 AM, Marc Perkel wrote: I'm seeing a lot of "Do you want to buy this domain name" spam lately. Is it just me or is anyone else seeing this? I saw a lot a few weeks ago but have been using rules and RBL stuff to battle with very good success. Have you eve

Re: Do you want to buy this domain name spam

On 2014-01-15 22:51, Marc Perkel wrote: I'm seeing a lot of "Do you want to buy this domain name" spam lately. Is it just me or is anyone else seeing this? It's not just you. Mostly to addresses harvested from WHOIS, at least that I've noticed. -- Dave Warren http

Do you want to buy this domain name spam

I'm seeing a lot of "Do you want to buy this domain name" spam lately. Is it just me or is anyone else seeing this? -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400

Re: Domain Name SPAM

John Hardin wrote: I wouldn't recommend doing that for *all* the RBLS, just Zen, and if you're going to make Zen a poison pill, then just put it into the MTA's DNSBL list and spare SA the load. John, Good suggestion... except that I don't think that Dave is using SA. He said he uses Smarter

Re: Domain Name SPAM

uk1host wrote: I have moved the weight of the RBLs including Spamcop and Zen to 30. Hopefully this will cut it back although at the moment I am still getting mail through. Dave, SpamCop and Zen won't block all the spam... but, along the lines of what I said previously, if this adjustment

Re: Domain Name SPAM

On Sat, 2008-03-08 at 09:22 -0800, uk1host wrote: > > uk1host wrote: > > > > > > I have moved the weight of the RBLs including Spamcop and Zen to 30. > > > > Hopefully this will cut it back although at the moment I am still getting > > mail through. I wouldn't recommend doing that for *all* t

Re: Domain Name SPAM

gt; > OOPS... > > When I said "PBL and CBL both will cause this to be on XBL and ZEN as > well" > > I should clarify that: > > PBL feeds into ZEN, but not XBL (didn't mean to imply that) > > CBL feeds into XBL and ZEN > > Nevertheless, since both are in ZEN, this didn't alter my observations > about each message and this didn't change my conclusions. > > --Rob McEwen > > > -- View this message in context: http://www.nabble.com/Domain-Name-SPAM-tp15891193p15917313.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Domain Name SPAM

d post the URLs used by spammers within the content of 5 > recent spams. (I don't filter SA list mail... but in case others do, put > a space before the "." in the domain names of those URLs so that your > won't get blocked by other's filters when you reply bac

Re: Domain Name SPAM

On Sat, 2008-03-08 at 16:14, Rob McEwen wrote: > > It looks to me like you have some kind of DNS malfunction...or > SmarterMail malfunction. > If you think this may be the case, try using Ethereal/Wireshark while you run a piece of known spam through a freshly started copy of SA. This will give a

Re: Domain Name SPAM

Dave, I don't think that you can score Zen too high. I'd bump Zen up to the highest score and see what happens. If a legit e-mail were to get blocked by Zen, you'd be able to tell your mail hosting client that the sender is listed on such a world-famous and reliable blacklist that this incomi

Re: Domain Name SPAM

OOPS... When I said "PBL and CBL both will cause this to be on XBL and ZEN as well" I should clarify that: PBL feeds into ZEN, but not XBL (didn't mean to imply that) CBL feeds into XBL and ZEN Nevertheless, since both are in ZEN, this didn't alter my observations about each message and this

Re: Domain Name SPAM

uk1host (Dave) wrote: (1) Return-Path: <[EMAIL PROTECTED]> Received: from Wimax-c3-ppy-pt-190-70-170-132.orbitel.net.co [190.70.170.132] by mail.uk1host.co.uk with SMTP; Sat, 8 Mar 2008 08:59:14 -060 190.70.170.132 is currently listed on CBL, SpamCop, and ivmSIP. (XBL and ZEN would also have

Re: Domain Name SPAM

ed: from 109.Red-88-15-17.dynamicIP.rima-tde.net [88.15.17.109] by mail.uk1host.co.uk with SMTP; Sat, 8 Mar 2008 08:36:19 -0600 Received: from camelnowzzz (HELO bookbindhost.localadultery) by conceptuall7.elect.sd.biz with WQMTP; Sat, 08 Mar 2008 18:18:10 +0500 Date: Sat, 08 Mar 2008 09:18:10 -0400 Message-Id: <[EMAIL PROTECTED]> From: "Milagros Ramey" <[EMAIL PROTECTED] > To: [EMAIL PROTECTED] Subject: [SPAM] SPAM-HIGH: di$c0unt meds shipping world wide! Reply-To: [EMAIL PROTECTED] X-Scanner: policeman for emitter (http://duncanthrax.net/exiscan/) X-Virus-Scanner: AMaVis 0.2.0-pre6 / Virus Scan X-Loop: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-SmarterMail-Spam: SpamAssassin 92.25 [raw: 36.9], SPF_SoftFail, ZEN X-MSKTag: [SPAM] X-MSK: DNS=2 - (3) X-McAfeeVS-TimeoutProtection: 0 Return-Path: <[EMAIL PROTECTED]> Received: from dsl88-226-51303.ttnet.net.tr [88.226.200.103] by mail.uk1host.co.uk with SMTP; Sat, 8 Mar 2008 07:58:24 -0600 Received: from personify by savetheinternet.com with SMTP id RIoxZWFLwo for <[EMAIL PROTECTED]>; Sat, 8 Mar 2008 15:57:35 -0200 From: "Theodore Ferguson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: SPAM-HIGH: Hey, start seeing dollars pouring in. Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-SmarterMail-Spam: SpamAssassin 64.75 [raw: 25.9], SPF_None, DNSBL-1, SpamCop, ZEN X-MSK: BYS=0.00,HRC=0.510931 --- Hope this helps I have the RBL Weight Set to 10. Cheers -- View this message in context: http://www.nabble.com/Domain-Name-SPAM-tp15891193p15913213.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Domain Name SPAM

Dave wrote: I had a auto response on my mail (which I have now removed) and I was getting 300+ spam over night. I have marked it to enable for filtering and enable for incoming blocking is this correct? Dave, First, it is good that you removed the "auto response" because some argue that

Re: Domain Name SPAM

ives very good advice. His web sites >> are chalk full of excellent analysis and review. Highly recommended! >> (Though his site would do better if he factored in "unique" catches >> among the 1st tier extreme-low-FP lists.) >> >> Rob McEwen >> [EMAIL PROTECTED] >> >> >> > > == > > Thanks Rob, > > I am hoping it will cut down on the spam I am getting. I had a auto > response on my mail (which I have now removed) and I was getting 300+ spam > over night. > > I have put the info into the RBL list on my mail so I am hoping it will > cut it down. > > I have marked it to enable for filtering and enable for incoming blocking > is this correct? > > cheers > DAVE (uk1host) > > > === I have added all the stuff above and am still getting alot of spam, medication, degree's and stop being floppy in the bedroom. Anyone got any other idea's to help cut back on this. cheers === -- View this message in context: http://www.nabble.com/Domain-Name-SPAM-tp15891193p15912821.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: Domain Name SPAM

me... but he does a jam up job with his web site... He > is a true expert in this field and gives very good advice. His web sites > are chalk full of excellent analysis and review. Highly recommended! > (Though his site would do better if he factored in "unique" catches > among

Re: Domain Name SPAM

[EMAIL PROTECTED] wrote: Do you know if there is a list of RBL's and where I can get it from. I have a customer who is getting alot of spam and I need to cut it down alot, he seems to be getting alot from drug companies and medical extension companies. Dave, I recommend the following 5 "1st ti

Domain Name SPAM

onto the service. cheers -- View this message in context: http://www.nabble.com/Domain-Name-SPAM-tp15891193p15891193.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.